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Field of Invention 

The present invention pertains to a method and a system for identifying a juridical 
person in order to provide said juridical person access to a service such as payment transaction, 
facility access transaction etc. 

5 Background Art 

In a GSM based payment systCTi, a constimer can pay for a purchase using his/her 
GSM phone. The consumers phone bill is then debited the purchase amount 

Technical realisation of such payment system requires from the consumer nothing but 
an ordinary GSM telephone. 
1^ 10 One of the weakest points of this implementation is the control of credit worthiness of 

the consumer. A consumer who has e.g. not paid his/her phonebill during the past half year is 
an unwanted entity in the payment scheme. Therefore, GSM based payment schemes have only 
been implemented for very small payment amounts so far, e.g. in soda machines. This to reduce 

W the financial risks. 

y; ■ 

^ 15 Advertisements nowadays are either non-targeted or then they are non-automised. Today 
advertising can be targeted and automated to varying degrees dq>ending on the medium. 
O Mass media (TV, radio, print, outdoor) is not very targeted; delivering advertising 

Q messages to, at best, a collection of like-minded consumers. 

^ ^ Paper coupons can be used to drive purchases, yet are expensive to administer and 

20 trad to lead to "price-shoppers" 

The Internet has opened up opportunities for better targeting and automation. For 
example, the on-line book re^ler "amazon.com" uses past individual shopping behavior to 
provide recommendations based on what otiier people with similar shopping patterns have 
purchased. Such recommendations do however not provide individuals with ^ecific offers that 

25 are not available to others and do not reach people shopping in the physical world. 

In US Patent No. 5,590,197 there is disclosed a cyber wallet in the form of stored and 
protected account infomiation, which may be "carried" on a tamper resistant portable electronic 
storage medium such as a smartcard, or stored on the customer's computer (or personal digital 
assistance, PCMCIA card, or the like) together with the browser/mosaic software, is provided 

30 to a customer for the purpose of making electronic payments from the possessor of the wallet to 
a merchant at a remote site on the Internet Securing of the information contained in the wallet 
is provided by a public key file containing public keys to be used for encrypting the pajraent 
infomiation into an authorisation ticket which is sent by the wallet to the merchant, and then 
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forwarded to the account servicer for decryption, the decryption key being in the form of a 
private key held only by the account servicer, and to which the merchant and other parties have 
no access. The public key file preferably contains a plurality of public keys selectable by an 
identifier associated with but not a part of the key itself, so that the account servicer can 
control, by having the merchant send an identifier to the wallet, the selection of 
uncompromised keys without anyone but the servicer having knowledge of which key is being 
selected. This solution is rather complicated. 

Summary of the disclosed invention 

The present invention relates to a method and a system for providing access to a 
service such as a payment access transaction, a facility access transaction, membership access, 
bonus or loyalty scheme access etc. 

An aspect of the invention is to solve problems related to an automatic payment 
transaction through for example a mobile phone system such as the GSM or, or other 
telephone like communication device, further referred to as telq)hone device. 

Another aspect of the present invention provides a door passage inlet, the door 
having no keypad or other physically accessing means from outside the facility. 

Yet another aspect of the present invention is to make called telephone numbers 
decide which service is asked for among a plurality of services. 

The aspects are accomplished through CLI-number recognition when 
establishing a call and not letting the call being received through off-hook detection by a 
called party, 

A method for identifying a juridical person in order to provide said juridical 
person access to a provided service is thus set forth through the present invention. It 
comprises the retrieval of the CLI-number provided to a telephone device used by said 
juridical person. The CLI-number being part of the phone communication protocol and being 
retrieved at a service unit telephone device or a clearing unit telephone device, respectively, 
during a phone call connection trial without establishing the communication, whereby the call 
is refused at the service unit or the clearing unit, respectively, which are adapted to refuse a 
call. The service imit establishes a communication to a clearing unit which always decides if 
the received CLI-number has access to the service provided, thus providing the service if 
access is established. 

In one embodiment of the invention the service is a payment transaction. 

In another embodiment of the presrat invention the service is a facility access 

transaction. 
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One embodiment comprises that a service category called for is dependent on 
the telephone nimiber dialed, i*e., the service, e.g. payment or facility access, depict is 
dependent on the dialed telephone number 

A further embodiment comprises that a facility access does not have any 
physically accessible locking means from outside the facility for entering the facility. The 
service unit is attached inside the facility in another embodiment, thus preventing vandalizing. 
An inside attachment prevents a person from noticing the existence of means for entering the 
facility from the outside of it in one embodiment of the invention. 

A still further embodiment comprises that the clearing imit checks if the 
received CLI-number is stored in a connected computer database. If so, looking for 
information corresponding to said CLI-number, and If the CLI-number is stored in the 
computer database and if the related information qualifies the user of that CLI-number to have 
access to the said service, the clearing unit sends an access confirmation to the service unit. 

Yet another embodiment comprises that fiie user is notified to his/her telephone 
device of a service. A notification is, in one embodiment transmitted via an SMS message or 
the like firom the service unit or the clearing unit, which thus comprise a GSM means or the 
like for transmission of the SMS. 

Further the present invention sets forth a system for identifying a juridical 
person in order to provide said juridical person access to a provided service. It comprises: 

a telephone device with a CLI-number, the device being allocated to said 
person, and said CLI-number being part of the phone communication protocol; 

a service unit device and a clearing unit device, being connected to a computer 
database, which decides if the received CLI-number has access to the service provided, 
whereby at least one of them comprises a unit telephone device to be called by said person 
with said telephone; 

retrieval means at the service unit or the clearing unit for the CLI-number during 
a phone call connection trial, being ad^ted not to establish the, whereby a call is refused at 
the unit telephone device; and 

said service unit providing the service if access is granted. 

Fxuther embodiments of the present invention are set forth through attached 
dependent claims, which include that the above system is able to perform embodiments of the 
method described above. 



Brief Description of the Drawings 
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Henceforth reference is had to the accompanying drawings for a better understanding of 
the present invention with its provided examples and embodiments, wherein: 
Fig. 1 illustrates a block diagram of an authorization system; 
Fig. 2 illustrates a schematic exemplification of a specific application of an 
5 authorization system; 

Fig. 3 illustrates a flow chart of a method for giving authorization regarding payment 
from a consumer to a retailer; 

Fig. 4 illustrates a schematic exemplification of a specific application of a targeted 
automated advertisement system; 
10 Fig. 5 illustrates a schematic block diagram of one embodiment of the present 

invention for the authentication and identification of a user to provide said user access to a 
specific service; 

Fig. 6 illustrates a schematic block diagram of another embodiment of the present 
invention for the authentication and identification of a user to provide said user access to a 
5 specific service; 

Fig. 7 illustrates a schematic block diagram of a fiirther embodiment of the present 
invention authentication and identification of a user to provide said user access to a service; 
i Fig. 8 illustrates a schematic block diagram of yet anothw embodiment of the present 

3 invention for the authentication and identification of a user to provide said user access to a 
!20 specific service; 

^ Fig. 9 illustrates a schematic block diagram based on the embodiments according to 

Fig. 5 to Fig. 8 depicting a specific service in a payment system; and 

Fig. 10 illustrates a schematic block diagram based on the embodiments in 
accordance with Fig, 5 to Fig. 8 and explains a specific service regarding a facility access 
25 system 

Description of Preferred Embodiments 

The attached Fig. I to Fig. 4 and the accompanying text of the present invention 
relate to the Swedish patent application 9902768-2 filed July 20, 1999. 

In Fig 1, there is disclosed an authorization system 10. The system 10 comprises at 
30 least one source xmit 12 and at least one destination imit 14i, . . 14n. The system 10 can 
comprise, but not necessarily, a communication means 16 for communication between said 
source unit 12 and said destination units 14i, 14n. Said system 10 also comprises an 
authorization unit 18 and communication means 20 for communication both between said 
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authorization unit 18 and said source unit 12 and said authorization unit 18 and said 
destination units 14i, 14„. Said authorization unit 18 comprises a memory means 22, in 
which there is stored validity information about said at least one source unit 12. Said 
authorization unit 18 checks the validity information before a decision is made whether said 
5 source unit gets authorized to perform said specific task. Said memory means 22 can e,g. be in 
form of a data base 22- Said system 10 also comprises a clearmg means 24 comiected to said 
authorization unit 18. Said clearing means 24 ensures and/or executes any payment 
transaction between e.g. a consumer and a retailer with or without the usage of any 
middleman. 

10 It is hereby pointed out that in this application the expression consumer means 

anyone who is paying and the expression retailer means anyone who is receiving money in a 
payment scheme. 

O of (he said communication means 16, 20 can e.g. be optical or infra red 

W communication links, electronic bus-system, or mobile communication means. 

Any of the said mobile communication means can e.g. be microwave communication 
y means, radio communication means, or based on tht NMT, GSM, or WC35MA standard, 
r Any of the said communication means 16, 20 can also be telephone means, or be 

in based on the Internet standard. 

O According to one embodiment, said source unit 12 is designated to a specific 

So consumer and each destination unit 14i, . . 14„ is a pomt of sale unit (P.O.S). Said system 10 
comprises also a to said memory means 22 connected clearing means 24. In Embodimwit one 
said validity information comprises the credibility of each consumer. Said authorization unit 
18 uses the credibility of each consumer and payment data received from a pomt of sale unit 
14i, .... 14n as a base for taking the decision whether payment is approved or not. When said 
25 payment is approved, said point of sale unit 14i, 14n delivers any kind of purchase proof 
for said retailer of interest and/or for said consumer. This purchase proof can e.g. be a cash 
ticket 

According to another embodiment, which is based on the previous embodiment, said 
system 10 comprises also an advertisement systan 26 conn«:ted to said memory means 22. In 
30 Embodimait two said validity information comprises information about advertisement 

coupled financial benefits of each consumer. Said authorization unit 1 8 uses the information 
about advertisement coupled financial benefits of each consumer and purchase data received 
from a point of sale unit 14i. . . ., 14n as a base for taking the decision whether payment is 
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approved or not and whether a financial benefit has to be taken into account by the clearing 
means 24. 

According to yet another embodiment, each of said source imit 12 is designated to a 
specific machine user and each destination unit 14i, , . 14n is a single component in a 
5 specific machine. Said validity infomiation comprises the state of each said component and 
data about each said machine user. 

In Fig 2 there is disclosed a specific application of an authorization system. 
It relates to a method of authorization in communication schemes in which a 
particular source communicates with a particular entity (destination) that is part of a 
10 distributed system. First a short explanation of the above terms. 
The communication scheme: 

This is a particular application where a certain communication between source and 
S destination is wanted and which requires some kind of authorization. 
J Some examples of such distributed systems are: 

1^ - Electronic parking meters, paid using the driver's mobile phone 

J' - A machine, in which e.g. every single component in the machine can be controlled in 

a remote way by one or different machine users. 



25 telephone, all mobile communication systems (NMT, GSM, WCDAM, radio, microwave 
communications, infira red communications •..), optical communication links, the Internet, 

any kind of electronic (computer-) bus system 

In Fig 3 there is disclosed a flow chart of a method for giving authorization regarding 
payment firom a consumer to a retailer. The method begins at block 40. Thereafter, at block 42, 

30 the method continues in that said consumer dials, e.g. using his/her GSM telephone, a payment 
identification, e.g. a specific GSM number, for a retailer of interest, wherein an authorization 
unit receives said payment identification for said retailer of interest and said consumers 
identification, e.g. by retrieving the consumer's GSM number and the specific GSM payment 
number firom the consumer's telephone call without opening a telephone connection. The method 




A remote (Intemet/telephone/GSM) control system for electronic equipment in a 
building or more specifically a house (c£ the bluetooth communication standard) 
An electronic payment system 



£10 



A targeted publicity system 

Components, connected by an electronic bus system 

Vending machine, paid using the purchaser's mobile phone. 

The physical information carrier for the communication can be of any kind: 
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then continues at block 44 in that a point of sale unit for said retailer sends all payment data to 
said authorization unit. Thereafter, at block 46, a data base in said authorization unit checks the 
validity information regarding said consimier and said retailer of interest before a decision is 
made whether said payment authorization is provided. Thereafter, at block 48, if said payment 
authorization is provided, said point of sale unit delivers any kind of purchase proof for said 
retailer of interest and/or for said consumer. At block 50 the method is completed. 

If said payment authorization is not provided, said authorization unit stops the 

method. 

In Fig 4 there is disclosed a schematic exemplification of a specific application of a 
method for automated and targeted advertising in which a consumer 62 uses a financial 
benefit which is linked to an advertisement sent to him by the advertisement system 72. The 
advertisement system 72 is linked to an electronic payment system 74, e.g. the payment 
system as described above. 

The method begins with step 50. The steps 50 to 60 are consecutive in time. 
In step 50 an advertiser 64 asks the advertisement system 72 to send a specific 
advertisement message to a specific group of consumers and specifies a financial benefit 
coupled to the advertisement. 

In step 52 the advertisement system's 72 data base 68, which e.g. uses earlier 
consumer purchase behavior stored in the electronic payment system database, is used to 
defme the targeted group of consumers. The advertisement system 72 also logs in its database 
68 which consumers are targeted for the advertisement message. 

In step 54 the advertisement system's computing unit 66 receives the list of targeted 
consumers from its data base 68. 

In step 56 the advertisemmt system 72 sends the specific advertisement messages to 
all of the targeted consumers. 

In step 58 a targeted consumer 62 purchases a number of items, among which one or 
more items for which the consumer received an advertisement message. The consumer uses 
the electronic payment system 74 for the purchase. 

During step 60, which is part of the clearing of the purchase in the electronic 
payment system 74, the electronic payment system retrieves the advertisement reduction fare 
information from the advertisement system 72 and takes the reduction automatically into 
account. 

A specific realization of the system contains a GSM based payment system, the 
advertisement system provider is the same as the electronic system provider, the database 68 
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is the same as the memory means 22, and the advertisement messages are in the form of SMS 
messages. 

Specifically the present invention provides a system for the authentication and 
identification of a user to provide said user access to a service. It is based on the retrieval of 
the so called CLI-number (clearing number), sometunes named A-number (calling party). 
The CLI-number is a number that is part of the phone communication protocol and which can 
be retrieved by the receiver of a telephone call vrithout having to open the established call 
connection. Such a refusal of opening a telephone connection line is accomplished by 
adapting a destination telephone device, such as a modem, telephone, mobile phone etc. A 
telephone device can be adapted by activating a specific switch, or by programming the 
device* 

The system comprises at least four sub-systems, which are the user, the service unit, 
the clearing unit and a computer database. Optionally it can include an additional 
identification unit or an additional computer database. 

A user is any juridical person or any technological device that can send a telephone 
signal via an interface, for example, a GSM telephone or the like. 

Said service unit has access to at least one processing unit and communication means 
with the clearing unit, such as a telephone modem. The service unit is the element that is 
providing a service response to a user. It can also comprise a keyboard or keypad for 
additional input of data such as PIN code. A place for a service unit to be situated could be a 
shop or any other place where a sale or money transfer is taking place. 

The clearing imit comprises at least one processor unit. It can be situated, for 
example, at a bank or other financier facilities. 

Said computer database and the additional computer database comprises at least 
information related to the provided service and to the users having access to the service. 
A possible additional identification unit can comprise means of biometric or electronic 
identification, e.g. fingerprint recognition or PIN-code recognition. 

In an embodiment of the present invention illustrated in Fig. 5, the user 80 is calling 
a phone number, which corresponds to the phone number of a modem in the service unit 82. 

The service unit 82, without establishing a communication, retrieves 84 the CLI- 
number of the user and refuses the call. The CLI-number is then transferred 86 to the clearing 
unit 88 by means of conununication known in the art. Said clearing unit 88 checks if the 
received CLI-number is stored in the computer database 90 and if so, looking for 92 
information corresponding to said CLI-number. If the CLI-number is stored in the computer 
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database and if the related infonnation qualifies the user of that CLI-number to have access to 
the said service, tiie clearing unit sends an access confinnation 94 to the service unit 82 by 
means of communication known in the art. The service is then provided to the user by the 
service unit 82. The clearing unit 88 can optionally send information related to the service to 
5 the user, for example, confirmation of a successfiiUy provided service by means of 

commimication 96, for example, GSM telephone or the like by sending an SMS message 
(Short Messages Services) to the user or a print oirt if the service unit 82 comprises a printer. 

Another embodiment of the present invention is illustrated in Fig. 6, based on the 
embodiment illustrated in Fig. 5 and being identical to the embodiment in accordance with 
10 Fig. 6, except that an additional identification unit 100 is added. The service is only provided 
if the service unit 82 receives the access confirmation 94 and if the user is identified 102, 104 
by the additional identification unit 100. 
2 In yet another embodiment illustrated in Fig. 7, the clearing imit 14 comprises at 

W least one modem. The user 80 is calling a phone numb^ which corresponds to the phone 
1*5 number of the modem of the clearing unit. The clearing unit 88, without establishing the 
y communication, retrieves the CLI-number 106 of the calling device, whereby the clearing unit 
- 88 checks if the received CLI-number is stored in the computer database 90 and if so, looking 
ti for hiformation 92 corresponding to the said CLI-number. If the CLI-number is stored in the 



'3 computer database 90 and if the related infonnation qualifies the user of that CLI-number to 
£20 have access to the said service, the clearing unit 88 sends an access confirmation 94 to the 
^ service imit 82 by said means of commimication. A requested service is then provided to the 
user by the service unit 82. The clearing imit can optionally send 96 inforaiation related to the 
service to the user, for example, confirmation of a successfiiUy provided service by means of 
communication such as a GSM telephone or the like. The service unit can optionally send 98 
25 a print out of a receipt. 

Still another embodiment of the present invention illustrated in Fig. 8, based on the 
embodiment according to Fig. 7 and being identical to it except for an additional identification 
4 unit 100 added. The service is only provided if the service unit 82 receives access 

confirmation 94 and if the user is identified 102, 104 by the additional identification unit 82. 
30 A fiirther embodiment of the present invention is based on any of the previous 

embodiments and illustrated in Fig. 9. In this embodiment one possible service is described 
more in detail. The present invention provides a service regarding a payment firom one party, 
i.e., the user 80, to another third party 108, for example, a retailer. In this embodiment, the 
service unit 82 further includes means for receiving 1 10 the amount of money the user owes 
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to the third party 108, e.g. via a keyboard or via an electronic interface to a cash box. If the 
access confirmation 94 is delivered to the service unit 82 and if, optionally, the user is 
identified by the additional identification unit 108, the service unit 82 transfers 1 12 the 
amount of money the user owes to the third party 108 to the clearing unit 88 communication. 
5 The clearing unit 88 stores 1 14 the amount of money in the computer database 90. The 
amount of money is then invoiced to the user 80. 

A still further embodiment of the present invention is based on any of the 
previous embodiments and illustrated in Fig. 10. In this embodiment one possible service is 
described more in detail. The present invention provides a service regarding the access of the 
10 user 80 to a facility, for example, the present invention provides the key to access a protected 
room. If the access confirmation 94 is delivered to the service unit 82, the service unit 82 
sends an unlock signal 1 16 to the locked door lock 118. Subsequently, the door is unlocked by 
^ known electrical or mechanical means and the user 12 has access to the facility. The present 

0 invention provides increased security compared to standard, physical keys. Firstly, as soon as 
p the user loses his phone and the corresponding CLI-number, the CLI-number can be 

withdrawn firom the access list to the &cility and, secondly, the phone number the user has to 

01 call to in order to get access, can be kept secret. This means that, even if the user loses his 
p phone, a burglar still does not have access to the facility wittiout knowing the phone number 
!!; to calL Furthermore, any mechanical, electrical or electronic means giving access to the 

20 facility on the outside of the facility, for example, keypads for code entries are not necessary 
anymore. The present inventions physical means can all be installed inside the facility to be 
entered, which reduces considerably the risk of destruction of the access means. The inside 
attachment also can prevent a person from noticing an alarmed facility. 

Another embodiment of the present invention is based on embodiments in 

25 accordance with Fig. 5 to Fig. 8. In this embodiment one possible service is described more in 
detail. The present invention provides a service regarding the purchase of a ticket, for 
example, to access a cinema, a museum, a theatre, a train etc. In this embodiment, the phone 
mmiber the user 80 is calling is related to the kind of ticket the user would like to purchase, 
for example, which movie the user 80 would like to see. The clearing unit 88 commtmicates 

30 by means of communication with the computer database 90 which contains the information of 
the availability of the ticket the user wishes to purchase. If the access confirmation 94 is 
delivered to the service unit 82 and if the clearing unit 88 retrieves fiie infomiation fi:om the 
computer database 90 that there is at least one ticket left to be purchased, and if, optionally, 
the user is identified by the additional identification unit 100 the clearing unit 88 stores the 
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prize of the ticket, which is related to the numb^ the user 80 called in the computer database 
90 in a field that corresponds to the retrieved CLI-number. The amount of money is then 
invoiced to the user 80, and the computer database 90 is updated to the number of tickets left 
to be purchased. 

It is appreciated that the means mentioned above can be software means or a 
combination of software and hardware means known in the art per se, but not in the way they 
are used or provided in the present invention. 

It should be understood that the invention is not restricted to the aforedescribed and 
illustrated exemplifying embodiments thereof, and that modifications can be made within the 
^ope of the following Claims. 



